Questions about EventLog Analyzer
Are there plans for any of the following:
- A better user reporting system that has at least some level of intelligence. After evaluating the software I've the only determination I've come away with is that custom reports have no way to do context-based filtering on reports. For syslog, for example, you can only create a report based on the alert level(s) and facilities. For busy mail servers, this creates a report that is basically unusable. I would like to be able to filter the events in the reporting engine similar to how the alert engine enables filtering - by text searches in the event itself.
- Integration with the other AdventNet products. Right now every product appears to be its own island. There doesn't appear to be a centralized authentication system for the products, so if I buy 5 products I end up with 5 authentication systems with 5 different databases. Product integration is key for our enterprise, and if there isn't any semblance of integration (which there doesn't appear to be any) I'm not sure I want to take the step to purchase.
- Considerably better event classification, including user-defined event classification based on heuristics of existing messages. I would like to be able to create an event category that deviates from the standard syslog facilities that tells me when something out of the ordinary actually occurred. When sendmail sends a warning or info message, I'd like to be able to reclassify those messages based on content and put them into their own sub-category of the Mail facility. Things like Unknown users, successfully sent messages, etc. would all be able to be classified that way.
- For each category of logging, the ability to correlate events. Event correlation is the backbone of a really good event logging system. I don't see any event correlation at all in the product.
I would like to thank you for providing "try" versions of your software, though. I really DO like your approach to the products you're building. The servlet approach and the user interfaces themselves are very nice, perticularly in comparison to some of the bigger and much more expensive systems on the market.
Thank you
- A better user reporting system that has at least some level of intelligence. After evaluating the software I've the only determination I've come away with is that custom reports have no way to do context-based filtering on reports. For syslog, for example, you can only create a report based on the alert level(s) and facilities. For busy mail servers, this creates a report that is basically unusable. I would like to be able to filter the events in the reporting engine similar to how the alert engine enables filtering - by text searches in the event itself.
- Integration with the other AdventNet products. Right now every product appears to be its own island. There doesn't appear to be a centralized authentication system for the products, so if I buy 5 products I end up with 5 authentication systems with 5 different databases. Product integration is key for our enterprise, and if there isn't any semblance of integration (which there doesn't appear to be any) I'm not sure I want to take the step to purchase.
- Considerably better event classification, including user-defined event classification based on heuristics of existing messages. I would like to be able to create an event category that deviates from the standard syslog facilities that tells me when something out of the ordinary actually occurred. When sendmail sends a warning or info message, I'd like to be able to reclassify those messages based on content and put them into their own sub-category of the Mail facility. Things like Unknown users, successfully sent messages, etc. would all be able to be classified that way.
- For each category of logging, the ability to correlate events. Event correlation is the backbone of a really good event logging system. I don't see any event correlation at all in the product.
I would like to thank you for providing "try" versions of your software, though. I really DO like your approach to the products you're building. The servlet approach and the user interfaces themselves are very nice, perticularly in comparison to some of the bigger and much more expensive systems on the market.
Thank you